$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: g099vExNEthXF5dsCuWYWB9mxE9Glk4avF1AkeD45BE= Subject key identifier: 55:7B:FE:08:42:91:B6:BB:34:68:99:AB:3D:9B:83:B2:87:DF:D4:D6 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0A97 Signing time: Sat 18 Oct 2025 20:31:34 +0000 Manifest this update: Sat 18 Oct 2025 20:31:33 +0000 Manifest next update: Sat 25 Oct 2025 20:31:33 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: 1ic3Mf/M/4fOrnKbLVMqdcoIKmBEsO1CBf88LLIFtic=) 2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=) 3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Oct 18 20:31:33 2025 GMT Not After : Oct 25 20:31:33 2025 GMT Subject: CN=68f3f925-0778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:63:7e:07:1f:29:4e:8c:f6:8c:6d:67:b8: da:11:f7:99:ba:c0:3a:74:8d:ae:98:a0:18:90:f8: 3f:98:2b:fc:f0:60:13:32:05:60:0a:74:76:50:ec: ca:d5:c4:b5:29:b7:d9:5e:87:65:19:b3:95:4c:fe: 6d:7f:30:ea:a5:2c:30:a9:9c:66:7a:9d:a2:5d:65: 9f:03:9a:3b:95:34:81:d4:fd:62:1b:34:94:65:a6: 18:06:1a:d2:82:80:46:e4:12:ee:b1:ed:16:40:fd: 46:ed:93:33:b7:a5:a7:26:b8:03:ab:74:50:94:a8: ba:4b:a3:c3:cd:2b:37:4c:be:3c:bd:d1:6a:2a:a0: 65:cc:1a:e5:8b:5c:68:e5:2b:dd:56:6f:c8:8a:40: 9a:ed:e5:bc:10:b3:35:0c:15:e5:3a:57:a2:0e:4a: dc:da:a0:a4:38:dc:8f:1d:95:ba:10:b2:08:4b:06: b3:49:33:8f:01:aa:3c:a4:d0:19:fb:43:83:ac:96: 50:3a:39:a0:72:b4:b9:9b:c6:29:e0:4e:24:00:76: 9b:ef:ef:d6:1d:d3:63:ca:28:5f:f2:8a:22:d7:e8: 38:af:a4:07:1e:e3:56:2e:b8:ff:78:b1:9b:fc:0d: ce:89:6d:ad:54:56:1c:1b:c8:83:1d:da:16:84:09: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:FE:08:42:91:B6:BB:34:68:99:AB:3D:9B:83:B2:87:DF:D4:D6 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1c:42:33:03:1b:0b:b2:b9:f2:67:66:91:a1:d5:b0:f4:26: c0:4d:c0:09:62:13:0b:ac:73:9a:05:87:48:57:96:89:46:1c: ac:a6:af:cf:c0:17:16:ff:09:32:78:26:47:6f:d5:49:bc:96: 8f:64:58:80:8a:ff:6d:ad:50:53:65:35:40:fd:02:38:09:03: b8:10:91:f8:7e:15:08:37:63:0d:16:18:83:be:b6:25:50:31: 81:b1:a4:8d:eb:8e:e2:05:fb:2e:6e:fb:86:4d:89:87:53:2a: 9b:ba:6d:9e:3c:31:df:b3:5d:66:d9:2f:6b:92:83:28:47:41: bc:2c:7d:7c:66:d4:36:31:6d:36:4a:75:06:9e:63:c7:14:9c: 37:ff:3a:ef:05:61:9f:53:5f:75:02:42:2e:7a:c6:cc:f5:4a: cb:43:92:ab:24:8a:2e:67:1d:46:10:37:c8:10:26:e2:28:e7: f1:7f:5c:17:02:77:36:7c:a4:fe:a3:ad:03:b8:8d:eb:b3:b8: 81:21:c3:f5:c2:d3:71:f2:af:8d:9e:32:a3:aa:a8:a0:1a:b7: 9c:23:50:2b:16:3a:2d:97:d0:c6:bc:93:87:15:c6:56:c0:15: 78:66:b3:19:46:e3:aa:29:25:30:1b:3b:1c:7f:89:b4:32:92: 93:d9:b5:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjUxMDE4MjAzMTMzWhcNMjUxMDI1MjAzMTMzWjAYMRYwFAYD VQQDEw02OGYzZjkyNS0wNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wljfgcfKU6M9oxtZ7jaEfeZusA6dI2umKAYkPg/mCv88GATMgVgCnR2UOzK 1cS1KbfZXodlGbOVTP5tfzDqpSwwqZxmep2iXWWfA5o7lTSB1P1iGzSUZaYYBhrS goBG5BLuse0WQP1G7ZMzt6WnJrgDq3RQlKi6S6PDzSs3TL48vdFqKqBlzBrli1xo 5SvdVm/IikCa7eW8ELM1DBXlOleiDkrc2qCkONyPHZW6ELIISwazSTOPAao8pNAZ +0ODrJZQOjmgcrS5m8Yp4E4kAHab7+/WHdNjyihf8ooi1+g4r6QHHuNWLrj/eLGb /A3OiW2tVFYcG8iDHdoWhAnuhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV7/ghC kba7NGiZqz2bg7KH39TWMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcHEIzAxsLsrnyZ2aRodWw9CbATcAJYhMLrHOaBYdIV5aJRhyspq/P wBcW/wkyeCZHb9VJvJaPZFiAiv9trVBTZTVA/QI4CQO4EJH4fhUIN2MNFhiDvrYl UDGBsaSN647iBfsubvuGTYmHUyqbum2ePDHfs11m2S9rkoMoR0G8LH18ZtQ2MW02 SnUGnmPHFJw3/zrvBWGfU191AkIuesbM9UrLQ5KrJIouZx1GEDfIECbiKOfxf1wX Anc2fKT+o60DuI3rs7iBIcP1wtNx8q+NnjKjqqigGrecI1ArFjotl9DGvJOHFcZW wBV4ZrMZRuOqKSUwGzscf4m0MpKT2bXj -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:57 2025 by rpki-client